This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1D231FDEBDD511F0BAEEED5AC4F9AE02.roa File: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (raw, json) Hash identifier: atOk9wYqp34gIO2eKlS4DkecCVwSIujOckF38AN4BrA= Subject key identifier: B8:F1:12:4E:D2:2B:3F:CA:F1:27:58:EA:A9:64:F2:59:3D:AA:EF:63 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0CDC Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1D231FDEBDD511F0BAEEED5AC4F9AE02.roa Signing time: Tue 30 Dec 2025 13:22:10 +0000 ROA not before: Tue 30 Dec 2025 13:22:10 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 23532 IP address blocks: 43.246.129.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Dec 30 13:22:10 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6953d201-910c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:98:0a:04:e7:44:78:79:9d:10:8a:b9:4b: 6b:b9:a7:cb:88:6b:92:43:06:92:62:40:c7:68:b0: 3e:42:43:cb:2c:ab:e2:f7:a7:51:6f:c0:03:35:91: 25:da:84:fd:13:0e:6d:a5:7e:a5:2a:44:8f:b6:36: bd:3a:69:94:91:6b:c2:7f:36:3b:7e:17:65:1a:1f: d4:00:9d:3c:67:4d:77:eb:88:40:0c:68:4e:b8:af: 07:bd:a8:a7:01:8a:aa:b4:e3:fe:c7:2d:1a:f3:90: ff:72:30:61:17:86:4c:87:c5:58:dd:1e:5b:71:fd: f7:14:9a:37:79:52:de:ee:22:87:2b:1d:43:75:c1: 37:c1:1d:e0:94:1d:d8:03:ff:08:e7:d1:da:91:e2: cd:f9:28:c3:5d:10:87:31:87:dc:6f:92:a9:ff:d3: 5b:d7:5e:67:8c:9d:89:a5:2d:8a:8f:0b:a6:b9:58: ce:00:cf:dc:c2:ab:80:c8:6b:72:c3:14:22:88:29: a2:c2:f6:c3:83:1d:d0:16:ef:70:56:b9:28:54:9f: 33:2f:9e:19:74:94:70:01:a2:55:a6:1d:04:60:e6: 71:ad:59:c1:30:11:12:35:14:17:c6:ac:a2:7a:85: a7:77:6c:16:31:24:37:65:78:27:52:10:c3:97:a5: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F1:12:4E:D2:2B:3F:CA:F1:27:58:EA:A9:64:F2:59:3D:AA:EF:63 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1D231FDEBDD511F0BAEEED5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 00:82:48:06:7a:51:a1:c0:a6:16:aa:ab:1e:ad:c8:26:07:14: 48:db:43:05:ef:a1:85:b5:88:08:8f:b7:1f:7b:08:c0:17:82: cf:1c:75:f3:e6:97:ea:5d:e5:b8:50:3f:51:36:1a:0f:d0:56: ef:7d:20:eb:f1:d4:10:7c:46:5a:0c:b1:f5:3b:66:ef:c6:69: 8c:1b:d3:c2:11:ee:96:31:e5:42:f8:81:66:82:ed:bc:1f:26: 83:c9:77:0e:75:37:98:bc:c5:17:25:7c:40:ff:d5:4c:84:58: 89:7d:8b:e4:ed:09:5a:4a:a2:06:ba:42:08:b5:88:be:18:19: a0:1b:68:7f:3d:e7:eb:43:d3:85:31:ac:55:2b:0d:b5:62:a8: 9c:02:6c:57:d8:46:0b:bb:92:b7:55:02:fc:88:1a:c4:86:48: 99:a5:0d:06:88:af:4c:25:36:25:93:13:03:84:5b:e2:1d:53: fb:6c:96:98:98:25:1f:27:35:8d:fb:2a:d0:d0:fb:0f:d2:f0: 55:3d:18:b3:7d:2a:9a:23:81:f1:8b:c4:a7:f2:4c:81:a8:02: d1:44:06:0e:eb:da:2a:c0:2f:65:3a:4d:c9:38:64:86:82:82: da:f7:08:35:f0:e6:fd:19:67:9d:93:ea:09:d2:1e:e9:a7:c6: b7:32:16:c2 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMjMwMTMyMjEwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTUzZDIwMS05MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTiYCgTnRHh5nRCKuUtruafLiGuSQwaSYkDHaLA+QkPLLKvi96dRb8ADNZEl 2oT9Ew5tpX6lKkSPtja9OmmUkWvCfzY7fhdlGh/UAJ08Z01364hADGhOuK8Hvain AYqqtOP+xy0a85D/cjBhF4ZMh8VY3R5bcf33FJo3eVLe7iKHKx1DdcE3wR3glB3Y A/8I59HakeLN+SjDXRCHMYfcb5Kp/9Nb115njJ2JpS2KjwumuVjOAM/cwquAyGty wxQiiCmiwvbDgx3QFu9wVrkoVJ8zL54ZdJRwAaJVph0EYOZxrVnBMBESNRQXxqyi eoWnd2wWMSQ3ZXgnUhDDl6VoWQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFLjxEk7S Kz/K8SdY6qlk8lk9qu9jMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvMUQyMzFGREVC REQ1MTFGMEJBRUVFRDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBAAr9oEwDAMEAGcH0QMEAGcH0gMEAWcapAMEAGf00wMEAKAU LTANBgkqhkiG9w0BAQsFAAOCAQEAAIJIBnpRocCmFqqrHq3IJgcUSNtDBe+hhbWI CI+3H3sIwBeCzxx18+aX6l3luFA/UTYaD9BW730g6/HUEHxGWgyx9Ttm78ZpjBvT whHuljHlQviBZoLtvB8mg8l3DnU3mLzFFyV8QP/VTIRYiX2L5O0JWkqiBrpCCLWI vhgZoBtofz3n60PThTGsVSsNtWKonAJsV9hGC7uSt1UC/IgaxIZImaUNBoivTCU2 JZMTA4Rb4h1T+2yWmJglHyc1jfsq0ND7D9LwVT0Ys30qmiOB8YvEp/JMgagC0UQG DuvaKsAvZTpNyThkhoKC2vcINfDm/RlnnZPqCdIe6afGtzIWwg== -----END CERTIFICATE-----Generated at Wed Jan 21 08:22:44 2026 by rpki-client